Windows xp burst critical vulnerability

According to foreign media reports, Microsoft recently warned that there is a critical security vulnerability in the Windows Shell framework. When users parse the .lnk shortcut method, the vulnerability can be automatically activated by a special shortcut. Malicious program.

This vulnerability affects all versions of Windows systems, including XP and Windows 7. In Windows 7, the vulnerability bypasses the operating system's security policy because no administrator privileges are required.

Microsoft Corporation Statement:

& nbsp; Microsoft is investigating a limited, targeted security vulnerability in Windows Shell. This announcement will announce which versions of the Windows system will be affected and will provide relevant solutions.

This vulnerability exists because when a user clicks on a specially crafted shortcut icon, Windows incorrectly resolves shortcuts that may have malicious code. This vulnerability is most likely to propagate through removable disks. If the system has disabled autoplay, the user needs to manually check the root folder of the removable disk. For Windows 7 systems, the removable disk automatically disables the autoplay feature. ”

Affected software includes:

Windows XP SP3

64-bit Windows XP SP 2 Professional

Windows Server 2003 SP 2

64-bit Windows Server 2003 SP 2

Itanium-based Windows Server 2003 SP2

Windows Vista SP 1 and Windows Vista SP 2

64-bit Windows Vista SP1 and 64-bit Windows Vista SP 2

32-bit Windows Server 2008 and 32-bit Windows Server 2008 SP 2

64-bit Windows Server 2008 and 64-bit Windows Server 2008 SP 2

Itanium-based Windows Server 2008 and Itanium-based Windows Server 2008 SP 2

32-bit Windows 7

64-bit Windows 7

64-bit Windows Server 2008 R2

Itanium-based Windows Server 2008 R2